Security Bulletin

RISK: High Risk

Cisco Firewall Services Module Security Bypass and Denial of Service Vulnerabilities

Multiple vulnerabilities have been identified in Cisco Firewall Services Module (FWSM), which can be exploited by malicious people to bypass certain security restrictions and cause a DoS (Denial of Service). An error in the implementation of the system log message ID 302015 when generating a log...

Last Update Date: 7 Oct 2011 15:10 Release Date: 7 Oct 2011 6085 Views

RISK: Medium Risk

Cisco Network Admission Control Directory Traversal Vulnerability

A vulnerability has been identified in Cisco Network Admission Control (NAC), which can be exploited by malicious people to disclose sensitive information. Certain input passed to the management interface via the URL is not properly verified before being used. This can be exploited to disclose the...

Last Update Date: 7 Oct 2011 15:02 Release Date: 7 Oct 2011 6126 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system. A use-after-free error exists in text line box handling and the v8 bindings. An error in...

Last Update Date: 6 Oct 2011 14:21 Release Date: 6 Oct 2011 6181 Views

RISK: Medium Risk

VMware Workstation / Player / Fusion UDF Filesystem Handling Buffer Overflow Vulnerability

A vulnerability has been identified in some VMware products, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an error when handling UDF filesystem images. This can be exploited to cause a buffer overflow via...

Last Update Date: 6 Oct 2011 14:21 Release Date: 6 Oct 2011 6428 Views

RISK: Medium Risk

SSL/TLS Protocol Vulnerability

A vulnerability has idenitied in SSL/TLS using Cypher Block Chaining (CBC), which can be exploited by malicious people to conduct Man-in-the-middle attack to decrypt encrypted SSL/TLS traffic and obtain sensitive information. A proof of concept...

Last Update Date: 3 Oct 2011 Release Date: 30 Sep 2011 7100 Views

RISK: High Risk

Apache HTTPD Range header vulnerability

A vulnerability has been identified in Apache HTTPD, which can be exploited by remote attacker to cause Denial of Service. The vulnerability can be detected by visiting the following website:http://apache-range-exploit.com/

Last Update Date: 3 Oct 2011 Release Date: 29 Aug 2011 7738 Views

RISK: Medium Risk

Adobe Photoshop Elements 8 Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Photoshop Elements 8, which can be exploited by malicious people to compromise a user's system.

Last Update Date: 3 Oct 2011 12:27 Release Date: 3 Oct 2011 6797 Views

RISK: Medium Risk

Symantec IM Manager Administrator Console Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Symantec IM Manager, which can be exploited by malicious people to conduct Code Injection, Cross-Site Scripting and SQL Injection.

Last Update Date: 3 Oct 2011 12:27 Release Date: 3 Oct 2011 6171 Views

RISK: Medium Risk

Cisco IOS Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco IOS, which can be exploited by malicious people to conduct denial of service attack and compromise a user's system.

Last Update Date: 30 Sep 2011 18:32 Release Date: 30 Sep 2011 6405 Views

RISK: High Risk

Mozilla Thunderbird Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Thunderbird, which can be exploited by malicious people to compromise a user's system.

Last Update Date: 30 Sep 2011 18:15 Release Date: 30 Sep 2011 6136 Views